VMware Products Unspecified Host Memory Corruption Vulnerability
BID:32597
Info
VMware Products Unspecified Host Memory Corruption Vulnerability
| Bugtraq ID: | 32597 |
| Class: | Unknown |
| CVE: |
CVE-2008-4917 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 02 2008 12:00AM |
| Updated: | Oct 01 2012 07:01PM |
| Credit: | Andrew Honig |
| Vulnerable: |
VMWare Workstation 6.0.5 VMWare Workstation 6.0.4 VMWare Workstation 6.0.3 VMWare Workstation 6.0.2 VMWare Workstation 6.0.1 VMWare Workstation 6.0 VMWare Workstation 5.5.8 VMWare Workstation 5.5.7 VMWare Workstation 5.5.6 VMWare Workstation 5.5.5 VMWare Workstation 5.5.4 VMWare Server 1.0.7 VMWare Server 1.0.6 VMWare Server 1.0.5 VMWare Server 1.0.4 VMWare Server 1.0.3 VMWare Server 1.0.2 VMWare Player 2.0.5 VMWare Player 2.0.4 VMWare Player 2.0.2 VMWare Player 2.0.1 VMWare Player 2.0 VMWare Player 1.0.8 VMWare Player 1.0.6 VMWare Player 1.0.5 VMWare Player 1.0.4 VMWare Player 1.0.3 VMWare Player 1.0.2 VMWare Fusion 1.1.2 VMWare Fusion 1.1.1 VMWare Fusion 1.1 VMWare Fusion 1.0 VMWare ESXi Server 3.5 VMWare ESX Server 3.0.3 VMWare ESX Server 3.0.2 VMWare ESX Server 3.5 VMWare ACE 2.0.5 VMWare ACE 2.0.3 VMWare ACE 2.0.2 VMWare ACE 2.0.1 VMWare ACE 2.0 VMWare ACE 1.0.7 VMWare ACE 1.0.5 VMWare ACE 1.0.4 VMWare ACE 1.0.3 VMWare ACE 1.0.2 VMWare ACE 1.0 Gentoo Linux |
| Not Vulnerable: |
VMWare Workstation 6.5 build 118166 VMWare Workstation 5.5.9 build 126128 VMWare Server 1.0.8 build 126538 VMWare Player 2.5 build 118166 VMWare Player 1.0.9 build 126128 VMWare Fusion 2 VMWare ACE 2.5 build 118166 VMWare ACE 1.0.8 build 125922 |
Discussion
VMware Products Unspecified Host Memory Corruption Vulnerability
Multiple VMware products are prone to an unspecified memory-corruption vulnerability in the virtual machine hardware.
A user in a guest operating system may be able to exploit this issue to write to arbitrary physical memory addresses. This may facilitate a compromise of the host and guest operating systems running on the affected computer. Failed exploit attempts will likely result in denial-of-service conditions.
The following products are affected:
Workstation 6.0.x
Workstation 5.x
Player 2.0.x
Player 1.x
ACE 2.0.x
ACE 1.x
Server 1.x
Fusion 1.x
ESXi 3.5
ESX 3.5
ESX 3.0.3
ESX 3.0.2
Multiple VMware products are prone to an unspecified memory-corruption vulnerability in the virtual machine hardware.
A user in a guest operating system may be able to exploit this issue to write to arbitrary physical memory addresses. This may facilitate a compromise of the host and guest operating systems running on the affected computer. Failed exploit attempts will likely result in denial-of-service conditions.
The following products are affected:
Workstation 6.0.x
Workstation 5.x
Player 2.0.x
Player 1.x
ACE 2.0.x
ACE 1.x
Server 1.x
Fusion 1.x
ESXi 3.5
ESX 3.5
ESX 3.0.3
ESX 3.0.2
Exploit / POC
VMware Products Unspecified Host Memory Corruption Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
VMware Products Unspecified Host Memory Corruption Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
Solution:
The vendor has released an advisory and updates. Please see the references for more information.
References
VMware Products Unspecified Host Memory Corruption Vulnerability
References:
References:
- VMware Homepage (VMware)